Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/TCYwxyjyD1g2jKWdC_sz91XC0QI.roa
File: TCYwxyjyD1g2jKWdC_sz91XC0QI.roa (raw, json)
Hash identifier: 0MLzUPLd2BzGhf3bCW09crL9cUV2m9lOgzQdaDbCtoQ=
Subject key identifier: 4C:26:30:C7:28:F2:0F:58:36:8C:A5:9D:0B:FB:33:F7:55:C2:D1:02
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 0197F50C39E0E59EB902A6C4598974D1EF27
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/TCYwxyjyD1g2jKWdC_sz91XC0QI.roa
Signing time: Thu 10 Jul 2025 15:55:08 +0000
ROA not before: Thu 10 Jul 2025 15:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200884
IP address blocks: 185.92.196.0/24 maxlen: 24
185.92.197.0/24 maxlen: 24
185.92.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f5:0c:39:e0:e5:9e:b9:02:a6:c4:59:89:74:d1:ef:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Jul 10 15:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c2630c728f20f58368ca59d0bfb33f755c2d102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:52:8a:42:7a:35:06:39:ed:75:26:3c:1a:
97:68:ff:b9:53:b4:73:7b:dd:22:41:0b:05:cd:d3:
1b:35:06:1e:70:0f:1b:43:49:c2:39:8f:47:71:ca:
51:d3:20:11:39:21:6f:e9:8b:a3:d2:06:21:06:d3:
b2:ea:5d:06:92:d1:7d:82:f6:18:dd:14:5b:70:42:
b9:d4:9a:2b:25:ff:20:b5:5c:c8:65:20:09:e9:73:
bf:da:b6:15:f6:f2:bb:7a:b1:7c:f9:8f:43:65:a3:
cb:39:cb:79:a6:f7:12:b1:a7:1f:31:96:b0:de:e6:
b5:69:0b:31:db:7b:b3:1d:2d:fd:10:64:e9:81:d4:
ac:1d:3f:40:a3:34:44:2f:f9:b9:0b:5d:28:5b:8f:
bc:94:33:f8:ff:8c:74:27:f3:65:27:c3:93:7b:ff:
d9:2f:61:d7:46:68:4a:a7:e4:36:00:f0:05:94:07:
88:9e:bf:90:38:81:33:5c:2f:ba:1f:fb:72:13:5a:
2d:3a:db:d4:30:0b:41:06:04:6e:90:d6:a2:c5:64:
a2:8a:89:2e:33:42:a1:0a:41:89:7f:36:b0:ef:fc:
8e:78:5f:f6:7f:c0:83:62:ec:78:6d:5a:96:84:c6:
bc:7e:b6:9e:bb:1f:1f:73:8a:ad:ca:07:9a:21:2c:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:26:30:C7:28:F2:0F:58:36:8C:A5:9D:0B:FB:33:F7:55:C2:D1:02
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/TCYwxyjyD1g2jKWdC_sz91XC0QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.196.0-185.92.198.255
Signature Algorithm: sha256WithRSAEncryption
82:bd:85:33:ab:70:07:29:2c:8b:75:a8:47:be:39:9d:5f:96:
b9:f1:cc:40:ef:f3:bd:69:14:4d:27:3e:7d:ac:25:40:13:34:
bf:9d:c1:02:a0:ce:7e:80:b3:3a:2b:e6:72:65:2e:52:28:1e:
72:4f:b4:1b:ca:5a:e7:2e:38:f5:46:1d:c9:a6:58:47:69:95:
a7:8d:83:52:8b:0e:93:4d:3d:de:2a:d9:16:24:df:8d:61:f5:
70:38:07:f7:f5:e4:a2:8a:10:dc:b0:1b:8b:80:e2:c0:c5:f1:
b9:b1:b6:08:c6:4f:64:18:2d:51:25:69:b7:24:ca:84:50:fe:
fd:86:69:d3:77:4c:83:1a:3b:31:db:f2:80:32:af:e0:6e:b5:
d1:de:a3:8f:4b:3d:92:92:1c:82:8e:58:82:5f:18:78:8e:66:
a5:6b:d1:a5:1c:ec:1f:2a:a1:a0:4a:95:8a:07:f1:9c:38:a3:
04:34:17:15:92:3e:55:44:ae:c9:9a:8d:f2:29:22:59:dd:d1:
08:80:e4:16:64:c3:d9:71:3a:63:c0:b1:10:ee:d7:0e:8e:ce:
fe:41:03:ef:99:a3:8a:24:86:3b:f4:34:0c:b1:d7:54:b8:a5:
35:4a:5c:27:4b:1a:e7:59:83:b3:60:09:43:84:ae:a3:60:35:
c1:81:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 01:54:20 2025 by rpki-client